GitHub Advisoryadvisory · Maven

GHSA-jf7x-57g8-9hm5 Jeecg-Boot CMS arbitrary file upload vulnerability

CRITICAL Published 2022-05-24 Modified 2023-08-23 Official page ↗

Aliases: CVE-2020-28088
Ecosystem: Maven
Packages: org.jeecgframework.boot:jeecg-boot-parent
Severity: Critical
Weaknesses: CWE-434
Reviewed: 2023-07-13

Affected packages

• Maven org.jeecgframework.boot:jeecg-boot-parent: <= 2.3 (no fix yet)

Description

An arbitrary file upload vulnerability in `/jeecg-boot/sys/common/upload` of jeecg-boot CMS 2.3 allows attackers to execute arbitrary code.

Related

Alias · CVE (1)

CVE-2020-28088 An arbitrary file upload vulnerability in /jeecg-boot/sys/common/upload of jeecg-boot CMS 2.3 allows attackers to execute arbitrary code. vulnerability

Weakness · CWE (1)

CWE-434 Unrestricted Upload of File with Dangerous Type weakness

References